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Details: ^ For information of recipients, captioned matter is 

a joint FBI/United States Air Force Office of Special 
Investigations (AFOSI) computer intrusions investigation. By way 
of brief background, FBI Cincinnati is investigating unauthorized 
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intrusions into computer systems located at Wright-Patterson Air 
Force Base (WPAFB) , Dayton, Ohio. The intrusions appear to be 
originating from Russia, hopping through the University of 
Cincinnati (UC), Cincinnati, Ohio, then terminating at WPAFB. 

The unknown intruder(s) has transferred several sensitive, though 
not classified, files to Russia. The transferred files generally 
are word processing, and/or power point presentations dealing with 
cockpit design and computer chip schema. 

m £&( Investigation has revealed that the unknown 
intruder(s) has made conne ctions to various other educational 
sites not previously seen. I I_ 
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Recipient Field Offices should ensure that the 
respective network systems administrators from the educational 
sites in their Division are informed that once the data from 


their compromised systems has been analyzed and compared to data 
from other compromised systems, the FBI may request additions.' 
assistance in furtherance of this investigation. 
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| A Chain of Custody form should 
be included with the original evidence. Any and all original 
FD-302 interviews conducted with network systems administrators 
should be forwarded to FBI Cincinnati, and a copy to FBIHQ-NIPC. 
FBI Cincinnati will forward the original evidence to the District 
of Columbia Forensic Laboratory (DCFL), Bolling AFB, Washington, 
D.C., for analysis. DCFL will promptly return all original 
evidence to FBI Cincinnati for proper storage. 
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